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Abstract 

Objectives:  This  project  developed  a  taxonomy  to  provide  guidance  in  selecting 
remedial  actions  to  address  problems  uncovered  during  root  cause  analyses  of 
events  in  a  medical  setting.  Methods:  The  taxonomy  incorporates  the  work  of 
Norman,  Rasmussen,  van  der  Schaaf,  and  others  to  characterize  and  classify  the 
failures  that  lead  to  an  event.  The  classifications  are  then  linked  to  likely 
efficacious  actions,  and  possible  solutions  are  ranked  by  the  likelihood  that  they 
would  be  effective  in  addressing  the  identified  problems.  Results:  The  project 
developed  a  taxonomy  that  suggests  types  of  remedial  actions  likely  to  prove 
efficacious,  as  well  as  those  that  usually  fail  to  have  any  effect.  Conclusion:  This 
system  could  assist  when  addressing  safety  problems.  The  system  presented  here 
still  requires  testing  and  refinement. 


Introduction 

Event  analysis,  properly  performed,  has  proven  to  be  an  effective  tool  for 
identifying  and  addressing  accident-prone  activities  and  situations  in  several 
industrial  settings.  The  Joint  Commission  for  Accreditation  of  Healthcare 
Organizations  requires  deliverers  of  health  care  to  perform  event  analysis  when 
dealing  with  serious  events.  However,  after  performing  a  root  cause  analysis,  the 
question  often  remains  of  how  to  use  the  results.  It  does  little  good  to  identify  the 
causes  of  events  without  guidance  on  how  to  address  them.  Far  too  often  the 
responses  consist  of  new  rules  that  prevent  that  particular  problem  from  arising 
again,  but  fail  to  address  the  underlying  problems  or  establish  actions  that  could 
prevent  a  larger  class  of  accidents.  This  project  developed  a  relationship  between 
classifications  of  failures  that  lead  to  events  and  possible  remedial  actions  to 
provide  guidance  to  persons  performing  event  analysis. 

A  taxonomy  is  simply  a  classification  or  ordering  into  groups  or  categories. 
The  key  in  the  definition  is  ordering  or  having  an  organization  behind  the 
categories,  rather  than  simply  a  listing.  In  the  context  of  event  analysis,  taxonomy 
provides  a  structure  to  help  the  investigator  assign  categories  to  the  actions  that 
led  to  the  event.  The  goal  of  such  categorization  is  twofold: 

1 .  To  look  for  commonalities  that  would  not  be  evident  from  a  list  of  the 
different  erroneous  actions.  Consider  for  example  two  events  at  a 
given  facility.  In  one,  the  nurse  failed  to  respond  when  a  patient 
stopped  breathing  because  the  alarm  on  the  monitor  malfunctioned.  In 
the  second  event,  a  patient  failed  to  receive  a  medication  because  the 
printer  at  the  nursing  unit  broke  and  the  nurse  never  saw  orders  for 
delivery.  The  facility  had  a  problem  with  preventive  maintenance  of  its 
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equipment,  but  looking  at  eaeh  event  alone  may  only  have  identified 
the  individual  pieees  of  equipment  as  needing  serviee. 

2.  To  provide  guidanee  for  seleeting  remedial  aetions  to  address  the 
eauses  of  past  events,  partieularly  the  latent  eauses. 


Previous  taxonometric  studies 

Taxonomies  have  been  used  for  assessment  of  human  performanee  failures 
sinee  the  end  of  the  19th  eentury.  Reason  presents  a  good  review  of  the 
development  of  taxonomies  for  sueh  applieations  and  develops  a  very 
eomprehensive  taxonomy  of  his  own.'  The  work  presented  in  this  ehapter  owes 
mueh  to  four  previous  taxonomies,  namely  those  of  Norman,^  Rasmussen,^  van 
der  Sehaaf'  (expanded  in  vanVuuren  et  al.^  and  Koppens^),  and  Kapp  and 
Caldwell’ 

Norman  eonsidered  the  psyehologieal  eauses  for  speeeh  errors.’  The 
elassifieation  system  he  developed  dealt  mostly  with  slips.  He  groups  the  slips 
into  three  general  eategories: 

1 .  Those  that  result  from  errors  in  the  formation  of  the  intent. 

2.  Those  that  result  from  faulty  aetivation  of  usually-eontrolled  behavior. 

3 .  Those  that  result  from  faulty  triggering  of  a  behavior. 

While  his  study  eoneemed  speeeh,  Norman  aeknowledged  that  the  errors  also 
applied  to  other  aetivities.  However,  the  failure  taxonomy  only  addresses  a  small 
part  of  the  range  of  errors  potentially  eneountered  in  the  arena  of  all  types  of 
aetions. 

Rasmussen  developed  models  for  human  aetions  based  on  the  level  of 
intelleetual  consciousness  required  for  the  work:  skill-based,  rule-based,  or 
knowledge-based  (SRK).^  Skill-based  actions  are  well  learned  and  practiced, 
proceeding  without  much  conscious  involvement.  Activities  such  as  driving  a  car 
(much  of  the  time)  or  recitation  of  prayers  during  religious  services  often  form 
examples  of  skill-based  activities.  Rule-based  actions  begin  when  faced  with 
decisions  about  what  skills  to  apply  to  a  situation.  In  job  settings  like  nuclear 
power  plants,  where  much  of  Rasmussen’s  models  evolved,  most  situations 
encountered  by  workers  are  quite  predictable,  and  the  worker  receives  training  to 
develop  the  skills  required.  The  first  response  to  an  observed  situation  entails 
selecting  the  rule  that  determines  which  skills  to  invoke.  Knowledge-based 
actions  only  arise  for  situations  that  fail  to  match  a  rule,  and  the  worker  must 
apply  knowledge  about  the  system  to  determine  the  actions  appropriate  for  the 
situation.  The  types  of  failure  that  take  place  at  each  level  are  different,  and 
Rasmussen  goes  into  great  detail  in  discussing  such  errors,  generating  a  taxonomy 
to  classify  them,  and  even  discusses  how  to  use  the  information  in  establishing  a 
plan  to  correct  problems.^  Rasmussen  concentrates  on  the  mechanism  by  which 
actions  fails,  without  great  attention  to  why  the  operator  failed  to  perform 
correctly.  He  also  treats  the  operator  much  as  an  automaton,  which  in  the  setting 
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of  the  power  plant  may  have  been  quite  appropriate.  In  freewheeling,  unstruetured 
medieal  settings,  almost  all  operators  exhibit  more  freedom  of  aetion  and  have 
less  guidanee  in  seleetion  of  rules. 

The  Eindhoven  taxonomy,  developed  by  van  der  Sehaaf^  and  others^’  ^ 
originated  in  ehemieal  plants  similar  to  nuelear  power  plants,  and  has  been  refined 
and  applied  to  medieal  settings.^’  ^  The  Eindhoven  taxonomy  foeuses  on  the 
performanee-shaping  eauses  of  the  failure  first,  and  only  if  no  nonuhuman 
teehnieal  or  organizational  eause  is  found,  resorts  to  deseribing  the  type  of  human 
failure  that  leads  to  an  event.  The  taxonometrie  elassifieation  falls  in  one  of  four 
levels: 

1.  Teehnieal  problems  (maehine  failures) 

2.  Organizational  problems 

3.  Human  performanee  failures 

4.  Patient-related  faetors 

Determining  the  elassifieation  for  an  event  entails  following  a  pathway  on  a 
diagram  where  eaeh  eategory  is  a  box  along  the  pathway.  The  first  box  that  fits 
the  event  establishes  the  elassifieation  for  that  event.  By  design,  teehnieal 
problems,  the  first  boxes,  are  the  easiest  to  fix,  and  elimination  of  teehnieal 
problems  would  likely  prevent  future  events  of  similar  nature.  The  seeond 
elassifieation,  organizational  problems,  establishes  the  environment  for  the 
failures  leading  to  the  event.  These  organizational  problems  form  the  latent 
eauses.  Of  the  organizational  failures,  those  easiest  to  fix  (training,  and  then 
protoeols)  eome  first.  Of  the  remaining  organizational  problems,  management 
priorities  may  be  fixable  (partieularly  if  management  has  instigated  the 
investigation  that  lead  to  the  elassifieation),  or  may  not  be.  Safety  culture 
probably  remains  a  problem  without  resolution,  in  which  case  the  investigation 
should  proceed  to  the  human  performance  failures  classification.  Human 
performance  failures,  the  third  group,  are  classified  by  level  according  to  SRK 
actions.  Under  the  category  of  rule-based  action  failures,  there  are  subpaths  for 
qualifications,  verification,  coordination  (as  in  communication),  intervention,  and 
monitoring.  The  skill-based  errors  are  defined  as  “slipping”  (fine  motor  problems) 
and  “tripping”  (gross  motor  problems).  It  can  be  argued  that  the  final 
classification,  patient-related  factors,  should  never  be  scored.  The  medical  staff 
should  be  prepared  to  react  to  whatever  the  patient  does. 

Unlike  Rasmussen,  Eindhoven  views  the  operators  more  as  independent 
agents,  whose  actions  are  shaped  by  the  environment  (which  is  formed  by  the 
technical  and  organizational  factors).  The  Eindhoven  taxonomy  has  been  applied 
in  medical  settings  for  blood  bank  operations^®  and  anesthesiology.^’  ® 

The  taxonomy  of  Kapp  and  Caldwell  bases  event  classification  categories  on 
five  functional  aspects  of  actions:  detection,  interpretation,  rule  selection  or 
planning,  and  execution.^  Each  of  these  general  categories  contains  four 
classifications  to  describe  the  cause  of  failure  at  that  step.  Thus,  this  taxonomy’s 
classifications  combine  the  stage  in  the  conceptual  process  where  the  error 
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occurred  with  the  nature  of  the  cause  of  the  failure.  As  with  the  two  previously 
discussed  taxonomies,  this  one  determines  the  classification  by  following  a 
pathway-type  ehart.  Initially,  this  taxonomy  assumed  that  the  first  failure 
eneountered  along  the  pathway  determined  the  elassifieation  for  the  event,  but 
later  Kapp  and  Caldwell  eame  to  believe  that  an  event  may  contain  several 
failures  (personal  communications,  1998). 


The  Madison  Medical  Taxonomy 

Following  the  leads  of  Norman,  Rasmussen,  van  der  Sehaaf,  and  others,  we 
developed  a  elassifieation  system  to  eharacterize  the  nature  of  the  failures  that  led 
to  an  event.  This  taxonomy  addresses  failures  in  health  care  settings.  This  new 
taxonomy  does  not  assume  that  an  event  under  study  begins  with  an  initiating 
event,  but  rather  reeognizes  that  health  eare  is  a  eontinual  eyele  of  patient  needs 
and  actions  and  reactions  of  caregivers.  Because  of  the  ehaotic  aspects  involved  in 
patient  eare,  there  is  always  some  experimentation  on  the  part  of  the  caregivers 
and  eontinual  eorreetion  to  aehieve  the  goal  of  euring  the  patients  (or  otherwise 
addressing  the  patients’  needs).  This  differs  markedly  from  eontrolled,  industrial 
settings  where  proeesses  usually  proeeed  as  planned. 

The  design  for  this  taxonomy  assumes  that  many  factors  influence  the  failure 
that  results  in  an  event.  Most  often,  removing  any  one  of  the  factors  might  prevent 
the  event.  Therefore  identifying  as  many  factors  as  possible  helps  guide  actions 
that  may  prevent  future  failures  from  propagating  into  events.  Thus,  any  given 
event  may  be  affeeted  by  many  faetors  and  so  may  have  many  taxonometrie 
elassifieations  assoeiated  with  it.  Each  classification  carries  potentially  useful 
information. 

This  taxonomy  begins  the  elassifieation  of  failures  in  an  event  with  the  first 
step  notably  outside  of  appropriate  aetion  and  the  corresponding  responses  to  that 
step.  At  eaeh  new  step,  we  not  only  foeus  on  where  the  proeess  went  wrong,  but 
also  try  to  identify  the  underlying  motivational  meehanism  as  well  as  the 
hardware/software  problems,  or  the  organizational  and  environmental 
performanee-shaping  faetors  that  enable  the  initiating  event  or  the  improper 
responses. 

The  taxonomy  ineludes  four  main  tiers.  The  first  tier  considers  what 
happened.  As  in  Kapp  and  Caldwell’s  taxonomy,^  the  seeond  tier  foeuses  on 
whieh  major  eomponent  of  aetion  failed.  The  third  tier  of  the  taxonomy  attempts 
to  find  what  contributed  to  the  failure.  Finally,  in  the  fourth  tier  the  underlying 
cognitive  meehanisms  of  human  malfunction,  as  well  as  the  detailed 
eategorization  of  the  shaping  factors  and  conditions,  are  eharacterized.  The  fourth 
tier  relates  to  the  third  tier  as  a  parent  elassifieation.  At  the  third  and  fourth  levels, 
the  taxonomy  determines  whether  the  failure  should  be  eategorized  as  a  human 
error  or  a  hardware/software  malfunction,  and  whether  there  are  any  enabling 
faetors  sueh  as  organizational  factors  or  environmental-shaping  faetors  that 
eontributed  to  the  event. 
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Level  1 :  What  happened? 

The  first  tier  looks  for  the  origin  of  the  event.  The  event  may  have  started 
beeause 

•  An  aetion  was  taken  when  no  aetion  should  have  been. 

•  An  aetion  was  ealled  for  but  no  aetion  was  taken. 

•  An  aetion  was  ealled  for  but  the  wrong  aetion  was  taken. 

•  An  aetion  was  called  for  but  failed  in  the  execution. 

Level  2:  Which  major  component  of  the  action  failed? 

Figure  1  shows  the  second  tier  of  the  taxonomy.  The  three  main  categories  are 
mistaken  action,  failure  of  detection,  and  failure  of  reaction.  The  categories  follow 
the  lead  of  Kapp  and  Caldwell.^  A  failure  of  detection  can  result  from 

•  The  absence  of  an  available  method  (i.e.,  no  protocol  or  an  ineffective 
protocol)  for  detecting  the  problem  in  the  situation. 

•  The  people  involved  missing  the  error  due  to  a  malfunction  of  the 
equipment. 

•  Failure  to  perform  a  detection  action. 

•  Incorrect  execution  of  a  detection  action. 

•  Simply  missing  the  detection,  even  though  all  actions  were  executed 
correctly. 

Note  that  all  the  categories  in  this  level  eventually  transfer  to  the  third  tier, 
“What  contributed  to  the  failure”  subpath.  The  categories  “no  protocol”  and 
“ineffective  protocof  ’  (for  detection)  lead  to  the  organizational  shaping  factors,  at 
the  bottom  of  the  third  tier  categories. 

Level  3:  What  contributed  to  the  failure? 

The  third  tier  of  the  taxonomy  is  illustrated  in  Figure  2.  In  this  level,  any  box 
to  which  the  path  leads  must  be  considered  for  possible  contributions  to  the 
failure.  A  YES  answer  at  the  human  error  or  hardware/software  boxes  leads  to  the 
respective  pathway  and  consideration  of  possible  contributions  from  each  box 
therein.  A  YES  at  the  human  error  box  also  leads,  via  the  circled  C,  to  the  human 
factors  sub-subpath  in  Figure  3.  Either  a  YES  or  NO  at  either  box  still  leads  to  the 
enabling  factors  box  and  consideration  of  possible  contributions  from  the  four 
topics  along  the  bottom  of  the  figure.  The  circle  with  the  B  inside  indicates  the 
entry  point  from  the  circle -B  points  from  Figure  1 . 

For  human  failures,  the  path  leads  to  the  fourth  tier  of  taxonomy  and  the 
human  error  sub-subpath.  The  human  error  subpath  in  level  three  draws  from  the 

8  5  6 

Rasmussen  SRK  model,  the  Eindhoven  Classification  Model  Medical  Version,  ’ 
and  Norman.  Slips  and  tripping  are  skill-based  errors  which  refer  to  actions  not 
in  accord  with  the  operator’s  intentions.  As  in  the  Eindhoven  taxonomy,  slips 
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Figure  1.  Madison  Medical  Taxonomy  second  tier  pathway  * 
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refer  to  failures  in  the  performanee  of  fine  motor  skills,  and  tripping  refers  to 
failures  in  whole  body  movement.  A  mistake  is  a  planning  failure  that  happens 
when  an  incorreet  intention  is  formed  and  the  wrong  action  is  executed.  These 
human  error  categories  will  be  further  classified  based  on  their  underlying 
cognitive  mechanism  in  the  fourth  tier  of  the  taxonomy  (Figure  3). 

The  hardware  and  software  subpaths  are  also  borrowed  from  the  Eindhoven 
Classification  Model  Medical  Version.^’  ^  A  hardware/software  failure  can  be  due 
to  a  poor  design,  a  good  design  poorly  constructed,  or  poor  maintenance.  A 
material  defect  (which  is  not  directly  related  to  either  poor  design  or  poor 
construction)  may  also  cause  a  hardware  failure. 

The  last  row  of  the  third  tier  of  the  taxonomy  (Figure  2)  shows  the  main 
categories  of  performance-shaping  and  situation  factors.  These  categories  include 
factors  or  conditions  that  may  affect  the  probability  of  making  an  error,  but  do  not 
directly  cause  the  error.  Hardware/software  failures  seldom  actually  cause  events 
or  untoward  outcomes  in  medicine,  but  often  lead  operators  to  make  mistakes.  In 
such  situations,  they  shape  the  performance  of  the  human  operators.  For  example. 
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Figure  2.  Madison  Medical  Taxonomy  third  tier  pathway,  what  contributed  to  the  failure 


a  control  panel  with  a  poorly  organized  layout  might  inerease  the  chanee  of 
hitting  a  wrong  button,  but  does  not  mean  a  wrong  button  will  eertainly  be  hit. 
Other  shaping  factors  include  external  faetors,  environmental  factors,  and 
organizational  factors.  These  faetors  will  be  further  eategorized  at  the  fourth  tier 
of  the  taxonomy. 

Level  4:  Why  did  it  fail? 

In  the  fourth  tier  of  the  taxonomy,  we  foeus  on  the  underlying  eognitive 
meehanism  of  human  malfunction  and  the  factors  that  influence  or  interfere  with 
human  performanee.  Figure  3  presents  human  error,  and  the  organizational  and 
environmental  enabling  faetor  elassifieations.  The  entry  points  are  the  eireles  that 
eontinue  the  pathway  from  Figure  2.  In  eaeh  of  the  paths,  all  elassifieations  must 
be  eonsidered  beeause  multiple  eauses  are  likely  to  be  involved. 

The  human  error  sub-subpath  (human  error  how/why)  is  based  to  a  large 
extent  on  the  SRK  approaeh  deseribed  in  Rasmussen.  The  terms  “skill-based,” 
“rule-based,”  or  “knowledge-based”  information  proeessing  also  refer  to  the 
degree  of  the  operators’  eonscious  eontrol  of  the  eorresponding  aetivities.  A 
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Figure  3.  Madison  Medical  Taxonomy  fourth  tier  pathway 
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_  Competition  for  attention 

Background 

Lack  of  staff  time 
Other  goals 
Immediate 

Other  duties 
Lack  of  staff 
Other  inputs  into  system 
Previous 

Physical  fatigue 
Mental  fatigue 
(complex  work) 
Recent  experiences 

-  Training  programs  -  knowledge 

transfer 

Lack  of  training 
Relevance  of  training 
Recentness  of  training 
Adequacy  of  training 
Correctness  of  training 

-  Ability 

Exceeding  ability 
Mental 
Physical 

Lack  of  experience 

_  Leadership 

Knowledge  of  leader 
Guidance  of  leader 
Safety  culture  of  organization 
Management  priorities 
-  Communication  system 


Environmental  subpath 
-  Tangible 

Noise 

Lighting 

Distractions  (human,  clutter) 
Ergonomic 

-  Intangable 

Time  of  day,  holiday 
Personal  problems 


skill-based  error  usually  happens  when  a  familiar,  automatie  proeedural  task  is 
performed.  This  type  of  error  ean  oeeur  due  to  manual  variability  or  inadequate 
topographic  orientation.  A  skill-based  error  can  also  occur  when  the  situation 
deviates  from  the  normal  routine.  If  the  sensory  input  is  so  weak  that  the  operator 
does  not  respond  to  the  change,  the  operator  makes  an  error  due  to  stereotype 
fixation.  On  the  other  hand,  if  the  operator  realizes  and  responds  to  changes  but 
unconsciously  executes  a  more  familiar  and  highly-skilled  task  instead  of  the 
planned  task,  the  error  is  due  to  a  stereotype  takeover. 

A  rule-based  error  happens  when  operators  perform  tasks  approached  by 
pattern  matching  with  a  set  of  internal  problem-solving  rules.  Rule-based  errors 
can  be  due  to  a  familiar  pattern  not  being  recognized  (when  a  situational  change  is 
covered  by  the  normal  work  know-how,  but  the  operator  fails  to  realize  this),  a 
familiar  association  shortcut  (responding  to  familiar  cues  that  form  only  an 
incomplete  part  of  available  information),  or  mistaken  options  (not  recalling  the 
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rule  correctly).  Finally,  knowledge-based  errors  happen  when  a  situation  is  unique 
and  unknown,  for  which  no  rules  exist  and  intelligent  problem-solving  is  required. 
Knowledge-based  errors  can  be  due  to  information  problems  (information  not 
being  sought,  information  being  assumed,  or  failure  to  realize  information  is 
needed)  or  inference  errors,  when  conditions  or  side  effects  are  not  fully 
considered. 

Four  types  of  enabling  factors  are  presented  in  the  third  tier  of  the  taxonomy. 
Two  of  these  factors  are  expanded  in  the  fourth  tier  (see  Figure  3).  Organizational 
factors  include  knowledge  of  leader,  management  priority,  communication 
system,  knowledge  transfer,  and  ability.  Environmental-shaping  factors  are 
classified  into  three  main  categories:  competition  for  attention,  environment,  and 
others.  These  main  categories  can  be  further  divided  into  subcategories.  For 
example,  the  environment  can  be  tangible  (such  as  sound,  noise,  visibility,  and 
lighting)  or  intangible  (such  as  the  end  of  day  or  a  holiday).  While  commonly  call 
“performance-shaping  factors”  in  the  human  performance  discipline,  this 
taxonomy  uses  the  term  “enabling  factors,”  drawing  on  the  psychological  parallel 
of  enabling  behavior  that  assists  another  person  in  destructive  activities. 

Guidance  for  remedial  actions 

As  noted  in  the  introduction,  one  of  the  main  goals  for  working  with 
taxonomy  to  classify  the  failures  related  to  an  event  is  to  help  identify  remedial 
actions  to  correct  deficiencies  and  prevent  repeated  events  occurring  in  different 
procedures.  In  theory,  the  remedial  action  required  to  address  a  given  failure  not 
only  depends  on  what  that  failure  was  (such  as  missing  the  detection  of  a  situation 
deviating  from  normal),  but  on  the  reason  for  the  failure.  The  headings  on  the 
columns  in  Figure  4  list  some  of  the  categories  of  remedial  actions.  The  listing 
certainly  is  not  exhaustive,  and  it  is  hoped  that  new  tools  will  be  developed  in  the 
future.  The  row  labels  are  a  sampling  of  the  failure  classification  in  the  taxonomy. 
Each  major  group  of  the  rows  (Which  component.  What,  and  Why)  follows  the 
tiers  of  the  classifications.  An  X  at  the  intersection  of  a  column  and  row  indicates 
that  the  remedial  action  tool  in  that  column  may  be  effective  in  addressing  a 
failure  of  the  type  in  that  row.  A  blank  indicates  that  the  column  tool  likely  would 
not  produce  much  improvement  for  the  causes  of  failure  given  in  the  row.  A 
question  mark  denotes  uncertainty,  either  because  the  failure  can  have  multiple 
causes  that  may  differ  in  their  responsiveness  to  a  given  remedial  action,  or 
because  the  relationship  between  the  action  and  the  cause  of  the  failure  requires 
more  research. 

The  tools,  of  course,  differ  in  their  power  to  effect  changes.  Some — such  as 
computer  order  entry  with  feedback  to  the  operator  about  variances  from  normal 
patient  care — are  very  strong  in  preventing  errors.  Other  tools,  such  as  passive 
signs,  while  necessary,  often  effect  only  small  or  transient  improvements.  Table  1 
presents  a  hierarchy  of  the  tools  with  respect  to  effectiveness.  This  hierarchy  is 
similar  to  that  of  the  Institute  for  Safe  Medical  Practices.'^  When  selecting  tools 
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Figure  4.  Sample  of  matrix  relating  failure  classification  to  remedial  actions 
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for  remediation,  those  at  the  top  of  the  list  should  be  tried  first,  if  possible.  The 
problem  with  following  that  reeommendation,  of  eourse,  is  that  the  more  aetive 
and  effeetive  tools  often  require  the  most  resourees  to  implement.  (For  example, 
eomputer  order  entry  programs  are  very  expensive  and  often  have  long  learning 
eurves  and  longer  aeeeptanee  eurves.)  As  with  any  ehanges,  the  effectiveness,  and 
the  effects,  must  be  monitored  closely  and  other  tools  applied  if  the  first  produces 
less  than  effective  correction. 

The  table  lists  fixing  environmental  factors  first.  While  these  actions  may  not 
address  deeper  issues,  they  usually  form  some  of  the  least  expensive  and  most 
obvious  actions.  Often,  removing  the  environmental  enabling  factors  prevents 
other  latent  causes  from  propagating  into  future  events.  Since  an  event  often 
carries  multiple  classifications,  tools  that  apply  to  several  of  the  event’s 
classifications  should  be  given  increased  importance  during  the  selection  of 
remedial  actions. 
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Table  1.  The  hierarchy  for  remedial  action  tools  based  on  decreasing  effectiveness* 


1.  Fix  environmental  problems 

5.  Independent  verification  and  redundancy 

Sound  control 

Independent  review 

Visual  control 

Redundant  measurement 

Neatening 

Operational  checks 

Cleaning 

Comparison  with  standards 

Isolation 

Increased  monitoring 

Design 

Added  status  check 

Acceptance  test 

2.  Forcing  functions  and  constraints 

Interlocks 

6.  Rules  and  policies 

Barriers 

External  audit 

Computer  entry  with  feedback 

Internal  audit 

Priority 

3.  Automation  and  computerization 

Establish/clarify  communication 

Bar  codes 

Staffing 

Computer  entry 

Scheduling 

Computer  feedback 

Mandatory  pauses 

Automatic  monitoring 

Repair 

Preventive  maintenance 

4.  Protocols,  standards,  and  information 

Establish/perform  quality  control/quality 

Check-off  forms 

assurance 

Establishing  protocol/clarifying  protocol 

Alarms 

7.  Education  and  information 

Labels/signs 

Training  (initial) 

Reduce  similarities 

Experience 

Instruction 

‘Note  that  the  environmental  list  indicates  only  some  factors  that  need  to  be  corrected,  without 
details  on  the  actions,  since  the  corrective  actions  are  likely  to  be  obvious. 


Conclusions 

The  taxonomy  presented  in  this  ehapter  has  taken  many  of  the  positive 
features  of  previous  taxonomies  that  have  proven  useful  in  industrial  settings  and 
adapted  these  features  for  use  in  medieal  praetiee  and  health  eare  delivery.  The 
elassifieation  of  an  event  takes  into  aeeount  where  failures  oecurred  in  the  overall 
proeess,  how  the  failure  manifested  itself,  and  the  eauses  of  the  failure  on  two 
levels.  Further,  a  matrix  keys  possible  remedial  aetion  tools  to  the  elassifieations 
based  on  the  types  of  notions  that  would  likely  prove  effioaoious.  The  system 
ranks  the  remedial  tools  aooording  to  the  probability  that  they  would  effeot 
ohanges  necessary  to  address  the  causes  of  the  event  and  prevent  future  events. 
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